Can't figure out how to update table with form variables.

  • b_heyer
  • Web Master
  • Web Master
  • User avatar
  • Joined: Jun 15, 2003
  • Posts: 4583
  • Loc: Maryland
  • Status: Offline

Post January 11th, 2004, 12:02 pm

Any time, keep me updated!
Pixel Acres V2
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post January 11th, 2004, 12:02 pm

  • Crimson_King
  • Newbie
  • Newbie
  • User avatar
  • Joined: Dec 25, 2003
  • Posts: 9
  • Status: Offline

Post January 12th, 2004, 1:51 am

whoops, before i meant take out all hidden variables, not put them in.
they're to large of a security risk if you keep any kind of info in them.
you have to worry about possible SQL injections, and anyone with the web dev toolbar for firebird can change them in 9 seconds.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Joined: May 28, 2003
  • Posts: 23404
  • Loc: Woodbridge VA
  • Status: Offline

Post January 12th, 2004, 9:58 am

Crimson_King - you have me curious. But just so you know how this is working, all of the form inputs are actually retrieved from the database. Nothing in the form itself is actually HTML. For a person to even access the page, they have to be a logged in member. They can't even see it as I have it set to default to a login/registration page if they try to access it as a guest. In addition the security verifies both the IP and SID of the user before establishing a session. The SID changes from session to session. In addition, any attempt to hack the form input from an external referrer should return an error. Would this not be enough security? Essentially it's the same security used on the forum board itself to deter hacking attempts. I sorta understand your point, but I need the value of the user for that hidden variable to update the correct table column. I'm having a hard enough time as it is getting it to do that "simple" task.
"There's no place like 127.0.0.1 except for ::1."
Alexandria Networks. Leader in IT consulting for associations/non-profits, and small to medium sized businesses around the northern Virginia and Washington D.C. metro area.

Post Information

  • Total Posts in this topic: 18 posts
  • Users browsing this forum: No registered users and 105 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 2011 Unmelted, LLC. Ozzu® is a registered trademark of Unmelted, LLC.